last executing test programs: 25.493072186s ago: executing program 1 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x54, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x80000001}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40408c5}, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/224, 0xe0}], 0x4, &(0x7f0000000640)=""/189, 0xbd}, 0x9ef}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/86, 0x56}, {0x0}, {&(0x7f0000000880)=""/179, 0xb3}, {&(0x7f0000000980)=""/249, 0xf9}], 0x6, &(0x7f0000000ac0)=""/218, 0xda}, 0x4}], 0x2, 0x40, &(0x7f0000000c00)={0x0, 0x3938700}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000080000f2000040"]) 25.346219315s ago: executing program 1 (id=13): syz_open_dev$dri(&(0x7f0000000040), 0x7b, 0x688b00) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x6f19, &(0x7f00000001c0)={0x0, 0x4099, 0x20, 0x1, 0x243, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000280)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000000c0)="510003000000", 0x6) r3 = pidfd_getfd(r1, r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500030000001400168010000880230002800800010000000000"], 0x38}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0xb54, 0xb, 0x40fd}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000580)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getegid() recvmmsg(r2, &(0x7f0000006d00)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000003c0)=""/85, 0x55}], 0x3, &(0x7f0000000440)=""/172, 0xac}, 0x6}, {{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000005c0)=""/168, 0xa8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/186, 0xba}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/48, 0x30}, {&(0x7f00000037c0)=""/207, 0xcf}, {&(0x7f00000038c0)=""/216, 0xd8}], 0x8, &(0x7f0000003a00)=""/86, 0x56}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003a80)=""/123, 0x7b}], 0x1, &(0x7f0000003b40)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004b40)=""/185, 0xb9}, {&(0x7f0000004c00)=""/189, 0xbd}, {&(0x7f0000004cc0)=""/21, 0x15}, {&(0x7f0000004d00)=""/112, 0x70}, {&(0x7f0000004d80)=""/231, 0xe7}], 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004ec0)=""/96, 0x60}, {&(0x7f0000004f40)=""/65, 0x41}, {&(0x7f0000004fc0)=""/85, 0x55}, {&(0x7f0000005040)=""/160, 0xa0}, {&(0x7f0000005100)=""/245, 0xf5}, {&(0x7f0000005200)=""/122, 0x7a}, {&(0x7f0000005280)=""/18, 0x12}, {&(0x7f00000052c0)=""/54, 0x36}, {&(0x7f0000005300)=""/101, 0x65}, {&(0x7f0000005380)=""/67, 0x43}], 0xa, &(0x7f0000005480)=""/204, 0xcc}, 0x5}, {{&(0x7f0000005580)=@in6, 0x80, &(0x7f0000005800)=[{&(0x7f0000005600)=""/66, 0x42}, {&(0x7f0000005680)=""/253, 0xfd}, {&(0x7f0000005780)=""/74, 0x4a}], 0x3, &(0x7f0000005840)=""/204, 0xcc}, 0xffffffc0}, {{&(0x7f0000005940)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000006cc0)=[{&(0x7f00000059c0)=""/138, 0x8a}, {&(0x7f0000005a80)=""/4096, 0x1000}, {&(0x7f0000006a80)=""/237, 0xed}, {&(0x7f0000006b80)=""/232, 0xe8}, {&(0x7f0000006c80)=""/49, 0x31}], 0x5}, 0x4}], 0x7, 0x40000000, 0x0) personality(0x0) 24.482674199s ago: executing program 1 (id=17): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x20001438) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) getitimer(0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x100, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) 23.429803721s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x8002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x40040, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @vsock, @tipc=@id={0x1e, 0x3, 0x2, {0x1}}, @nl=@unspec, 0xfe, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_macvtap\x00', 0xfffff8d7, 0x4, 0x55c}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r6, &(0x7f0000000300)=""/97, 0x61) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008"], 0x20}}, 0x0) dup(r7) 23.24400763s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 23.090347531s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x8002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x40040, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @vsock, @tipc=@id={0x1e, 0x3, 0x2, {0x1}}, @nl=@unspec, 0xfe, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_macvtap\x00', 0xfffff8d7, 0x4, 0x55c}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r6, &(0x7f0000000300)=""/97, 0x61) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008"], 0x20}}, 0x0) dup(r7) 22.947380472s ago: executing program 0 (id=25): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000003, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) r1 = socket$inet6(0xa, 0x3, 0xfe) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) recvmmsg(r1, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2}, 0x78a337e3}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20004000) socket$inet6_dccp(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) 22.778701362s ago: executing program 2 (id=26): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40020) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = creat(0x0, 0x0) write$P9_RMKNOD(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="fe0d08000600090002b90800070006000400696a2aa2b7aec42eeb49b895e4b23fa23f90b50fedbc9fde557c76a0220fd8c7b43678b788a8632dfa9d"], 0x18) read$FUSE(r5, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000080), 0x101002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, 0x0, 0x20000080) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r7 = socket(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1, 0x0, 0x0, 0xe4}}], 0x1, 0x0, 0x0) 22.558263454s ago: executing program 1 (id=28): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_DEV_DESTROY(r8, 0x5502) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005001700"], 0x54}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xc2) r9 = socket$inet(0x2, 0x3, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x238, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x238}}, 0x0) 22.430311796s ago: executing program 32 (id=28): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_DEV_DESTROY(r8, 0x5502) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005001700"], 0x54}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xc2) r9 = socket$inet(0x2, 0x3, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x238, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x238}}, 0x0) 21.494950453s ago: executing program 2 (id=31): syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, 0x0, &(0x7f0000000200), 0x1, r0, 0x9000000}, 0x38) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 21.353024801s ago: executing program 2 (id=32): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mount$fuse(0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) ptrace$cont(0x1f, r1, 0xd2, 0x3) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}]}}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000005"], 0x2c}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000580)="5287e8ad99ff1f2cb47d36648a0eda7c58781fa0dea33a7539c15bf526acbd0d5e76a209373b9eeb2d48adfc6f45ed7e8aa70a66cfc5612dab96e00a4b5aaf6b8ab524a6c72f1c5e7a47d5a82e20d5a19cf242dc9f64661b62b8dcc5292580860ea891902c21dc00ae8c69d8b53d54f731b12d1a55842abaf02c1350e25827864b5035e3315c387decdea23f8f81df4db3accf33baa7ae571f07ba847ff32f3eb5b52a8e692f238dfe0a9a927ecea5cc22a8249b0f8f989f95278665fcdbe0cb99abba523f30a1e53cb0fbee29a794041f74f4383fa80448ffaa52aff102aa0b26aae34e15d67aa589981aae50d907d2bce50c1e5e58bfc7e9c7797cb7cf21ceb51f526c3abe107fbfc3602b1e0e7c4cbced2aa9e01224fe7b3301061fa9a2280878673a4923bf76e334fb1d3186fb40d694c375cc7eeb365078", 0xfffffffffffffca3, 0xfffffffffffffff8) chdir(&(0x7f0000000100)='./file1\x00') r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) read$FUSE(r5, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) mount$fuseblk(&(0x7f0000000200), &(0x7f0000000280)='./file1\x00', &(0x7f0000000400), 0x890110, &(0x7f0000003300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x2c42}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffffffff06d0}}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@subj_user={'subj_user', 0x3d, '(\xa0($['}}, {@permit_directio}, {@fowner_lt}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@dont_appraise}]}}) 21.238035867s ago: executing program 2 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 21.11881879s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x8002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x40040, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @vsock, @tipc=@id={0x1e, 0x3, 0x2, {0x1}}, @nl=@unspec, 0xfe, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_macvtap\x00', 0xfffff8d7, 0x4, 0x55c}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r6, &(0x7f0000000300)=""/97, 0x61) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008"], 0x20}}, 0x0) dup(r7) 20.329888975s ago: executing program 2 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 20.264693537s ago: executing program 33 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 19.636785967s ago: executing program 0 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x8002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x40040, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @vsock, @tipc=@id={0x1e, 0x3, 0x2, {0x1}}, @nl=@unspec, 0xfe, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_macvtap\x00', 0xfffff8d7, 0x4, 0x55c}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r6, &(0x7f0000000300)=""/97, 0x61) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008"], 0x20}}, 0x0) dup(r7) 18.928856763s ago: executing program 0 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 18.83295358s ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 18.387207439s ago: executing program 0 (id=44): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x10001, 0x4, 0x7, 0x7, 0x5, "36ffc34d355b6cbba1f2c7026762d662a1a132", 0x7, 0x1}) syz_usb_ep_read(r0, 0x0, 0xae, &(0x7f0000000100)=""/174) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 18.340575726s ago: executing program 34 (id=44): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x10001, 0x4, 0x7, 0x7, 0x5, "36ffc34d355b6cbba1f2c7026762d662a1a132", 0x7, 0x1}) syz_usb_ep_read(r0, 0x0, 0xae, &(0x7f0000000100)=""/174) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 18.287467324s ago: executing program 3 (id=47): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x11a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3a6}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (fail_nth: 2) 18.078018799s ago: executing program 3 (id=48): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40) sendmsg(r4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 17.028579079s ago: executing program 3 (id=49): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40) sendmsg(r4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 16.123332841s ago: executing program 3 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 15.994402842s ago: executing program 3 (id=51): r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20001300, 0x20001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x5, 0x4, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x68, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x6, [{@empty, 0x2}]}, @ssrr={0x89, 0x1f, 0x7f, [@broadcast, @remote, @broadcast, @empty, @local, @multicast2, @multicast2]}, @rr={0x7, 0x2b, 0x46, [@remote, @multicast2, @local, @remote, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x7, 0x4, @vifc_lcl_ifindex=r3, @private=0xa010101}, 0x10) 15.267876203s ago: executing program 3 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000c747"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mlockall(0x2) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000400)=""/32, 0x20, 0x0, 0x0, 0x0, 0xffffffff}}, 0x11c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x40200) r5 = dup(r4) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8000000000008, 0x4, 0x0, 0xfffffffffffffa5a, 0x4000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfff}, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b3"], 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) 15.228634612s ago: executing program 35 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000c747"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mlockall(0x2) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000400)=""/32, 0x20, 0x0, 0x0, 0x0, 0xffffffff}}, 0x11c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x40200) r5 = dup(r4) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8000000000008, 0x4, 0x0, 0xfffffffffffffa5a, 0x4000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfff}, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b3"], 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) 4.078709172s ago: executing program 6 (id=105): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}, 0x8) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) 3.188845565s ago: executing program 5 (id=114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) io_uring_setup(0x30d1, &(0x7f0000000300)={0x0, 0xd27b}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r6, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0xc6e, 0x400, 0xed, 0x8, 0x6, 0x3, 0x0, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad43, 0x5, 0x4, 0x0, 0x7, 0x6, 0x9, 0x101, 0x515, 0x7, 0x401, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x9, 0x38, 0x4, 0xfff4, 0x676, 0xa, 0x3, 0x800, 0x8], 0x3}}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 3.18851017s ago: executing program 6 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)) r3 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) write$khugepaged_scan(r3, &(0x7f0000000240), 0x8) 2.994674423s ago: executing program 6 (id=117): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) (async) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ff02"]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) (async) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000001bc0)={'trans=virtio,', {[{@cache_readahead}]}}) 2.442399083s ago: executing program 4 (id=119): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x28002) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x15, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x7fd]}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2], 0x15) 2.36872884s ago: executing program 4 (id=121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1, 0x100004, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x42032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x1d0001, 0x0, [0x0, 0x0, 0x0, 0x800000000000000, 0xfffffffffffffffd, 0x742]}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000010000802215939ba415905b7026f10b000000020000000100e2be2e"]) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) syz_io_uring_submit(r3, 0x0, 0x0) creat(0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1) io_uring_enter(0xffffffffffffffff, 0x5f11, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000080), 0x208000, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 2.368380463s ago: executing program 6 (id=122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x24000c11) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x206, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf9c085fa}]}, 0x24}, 0x1, 0x0, 0x0, 0x2850}, 0x4040005) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r5, 0x6cc80, 0x80000000, 0x7fffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r10}, 0x4) 2.238497343s ago: executing program 5 (id=123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x6f2c82887cb54bc5, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b589ebc55cf4a6ba22edd87fd355eda13da116330eb71779f7f9f15dbd172149a3a68b3b32a60fdb0ff3dbfa6873582d54fc04b97d479100fcec22ca6d8a61a76afef03b958ea0bafaa19f8ceb74223290bc846f259d73dc14dab117cb68c9f7db6cf2a60007bb36c220f505a2c557d0da5931b7e291e93b25228b6e7b31bee4233c7a5f669281cfdbbe4cb2d30145c8a92dd25880126f78fb5b876c76ed", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf257f00000008000300", @ANYBLOB="c36738f99642c30e190a60adf731cb254a60f5db3d64498ea8d5d697d2fdcfe736cb4b1cedee6f7753e49ffe676d432111e7cbc1853bab441faed9c6b2fa88d4027914db8ba673aa9b449bdbeb058abb52f0e2be93f7ca394705f8b8d3e57dd456cae581672ca6075ff43681abf6d7289b43a58e27b9d21f844c78dee642880d28ab22f344828f577ccb7cbe0f22daa8b7c154434c247719886aacf05d58377a271032a39c25adde4622483e7dfdfa1b91eaed142fe1ccd2af093bd65305e9952506feafb12ad75a887e7f9736d32df1a6637d7e7cfb252fc3e0bf18eebca9bd7c5bc360", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000380)={&(0x7f0000000500)=[{0x4d29, 0x8f5, 0x0, 0x0}, {0x6, 0x2200, 0x0, 0x0}], 0x2}) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) socket$inet6(0xa, 0x3, 0xff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r7, @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYBLOB="95517409c4b6ea3236995e24d468a749bd2ee92b828be4ec3b6dca45f9b2d1511e27cb065d20697f53048109fd2de1d860903e2bbc76c41749c3a54f6201715c21caea661c6d8cd6abb0f1b3370d62d3bc043c1713c81ca5a22fcb3a90be8caa54a9ddf073f926a58ee8c2299e0d9fb27585296d2e4e711f64fcb835b96763d76f7ee4117247157c4dab96808d256d3e4cf6a345844e4cb76ebfa2b3ba0624f06f9bc568cc5a811a197531464d12182b4e8aabaff792c9a8762f7ff924930dfc28873305cb845c3c7b4549fcf7ed90d70f93ae54afb8130d8a28e9e50d69b2fea136624a8ea7", @ANYBLOB="050000000000000004000000000000000008000000000000", @ANYRES32=r8, @ANYBLOB="0d371dd5bd57942819dce443bb8be281a36366a03e1d7b72961b7f71cf40f64b87790d05e7248fdc1fa9110116b094002303305b1ceb31ec51e2b76848ad1c"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x1c) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="8c0000001701000002000000bcffffff8354c91bd35062e42014dd2a4260924a31be1ff8ee94656c00822a74666303aa1a5f3de5dc7994c34ebcf92983e4257736679660ceb8082a16ea58cb38e51b3777f435c0ccf82990000000006a099523cf4915bd234544c2dab42a5995f3097477a26fc65b0d82fb13c0928ec3bef0db431759d2dede86524a070000108f41dba82077e1a81663c5d538d5c26d4062d86711712efd9197a31ab7f0095acdccfadb7d601ce9ce199d724e79f1cd951b2d986ce0"], 0x8c, 0x4810}], 0x1, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1}, 0x10000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r10}, 0x69) memfd_create(&(0x7f0000000100)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o\xa4\xb4\x80\x91\xa4n$\x17\x1c\x80\xf7\x81\x11\xf5\x8d\r5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3', 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x1259, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x8, 0x0, 0x0}}, 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 2.16905866s ago: executing program 7 (id=125): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0xb, 0x4}, {0x1, 0x6}}]}}, 0x11) 2.168822573s ago: executing program 7 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x8002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x40040, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @vsock, @tipc=@id={0x1e, 0x3, 0x2, {0x1}}, @nl=@unspec, 0xfe, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_macvtap\x00', 0xfffff8d7, 0x4, 0x55c}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r6, &(0x7f0000000300)=""/97, 0x61) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008"], 0x20}}, 0x0) dup(r7) 2.028938576s ago: executing program 4 (id=127): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000091ac70ada173000100000008000200030000000c00048005000300020000007236297193ef068a25eb7978ebdc660359975949dac1317c31728317d26690e03e0265a2f60e9f1bca4ba12bf3f32197e53300000000a0000000d436b9bd24f9ac142c762566d92a3e445b71f2c8de50b078e766e85df5019c5ab2421a6a9a657b4cfe1f1cdd45cbcdbcc96ad8215b8376f677"], 0x28}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x26e1, 0x0) 1.938409186s ago: executing program 7 (id=128): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f0000002100), 0x4, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x8000000, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) 1.307256069s ago: executing program 6 (id=129): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0xba, r3, 0x0, 0x0, 0x7, 0x0, 0x3, r3}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="468c89c355d477aa3c", 0x9}], 0x1}, 0x0) writev(r0, &(0x7f0000002800)=[{&(0x7f00000028c0)='?', 0x1}], 0x1) 1.128799973s ago: executing program 4 (id=130): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) r2 = syz_io_uring_setup(0x487, &(0x7f0000000400)={0x0, 0x7079, 0x100, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x1000000, 0x0, 0x0, 0x0) 1.078034306s ago: executing program 7 (id=131): mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000b42ffffffffffff00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500000030200401200bd06ffffffffffff0000"], 0x48}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)) chdir(&(0x7f00000001c0)='./bus\x00') r8 = open(0x0, 0x0, 0x0) lseek(r8, 0xfffffffffffffffb, 0x0) 1.076167276s ago: executing program 5 (id=132): socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0xd, 0x0, 0x7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x28}, 0x40010) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) (async, rerun: 32) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file6\x00', 0x8000, 0x2) (rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) (rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f00000005c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xffffffff, @empty, 0x45e4}}, 0x24) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 1.073601987s ago: executing program 5 (id=133): io_uring_setup(0x1178, &(0x7f0000000080)={0x0, 0x5523, 0x8, 0x3, 0x13a}) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 1.00880714s ago: executing program 4 (id=134): syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xa3, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010102, 0x9}, {@remote}]}]}}, @timestamp_reply={0x11}}}}}, 0x0) 1.006752294s ago: executing program 4 (id=135): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000091ac70ada173000100000008000200030000000c00048005000300020000007236297193ef068a25eb7978ebdc660359975949dac1317c31728317d26690e03e0265a2f60e9f1bca4ba12bf3f32197e53300000000a0000000d436b9bd24f9ac142c762566d92a3e445b71f2c8de50b078e766e85df5019c5ab2421a6a9a657b4cfe1f1cdd45cbcdbcc96ad8215b8376f677"], 0x28}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x104000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009", 0x15}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000540)="5c4e45fbee2c37d45b905cbf3aa43570b1c7808793af02ebe8218d4bb7c2516a5e30cf2392fc2238a950bf864b5d90e43b293ca59e7a395156c4e2962d17ab82add00a43b95df6404f56579364596a72951443e06df0b1188ef2c5423205dd2dd8879b89f2fad4fb73cd5a3fa062feead99b3535610a83f81c3c4b5f8901233c540f2afaa8ef905bf248ac906e3a11", &(0x7f0000000600)=""/242, &(0x7f0000000700)="b894888b36dc8f095a7466c101d1c2706eb7fe47275aabcf494b507a282a3792379ae7d9d1ddabc38b4664b7d3c8900e220e463bb8f8bbe0240f69d938621717dd507bc0fe88305f4ee2efb6da9a48b2513383a316a4d0e7e38d956c2beedfd6b8b22e77bb22c5ed7708e4556e08c1b94998f5796d112177b2e62e4f7a2dd058d40f753a3a482a497e8db71b9d566904b0790362bcdff99286f9ea92ddfb794d87fd97", &(0x7f0000000980)="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", 0x737, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 868.26411ms ago: executing program 5 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x8002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x40040, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @vsock, @tipc=@id={0x1e, 0x3, 0x2, {0x1}}, @nl=@unspec, 0xfe, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_macvtap\x00', 0xfffff8d7, 0x4, 0x55c}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r6, &(0x7f0000000300)=""/97, 0x61) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008"], 0x20}}, 0x0) dup(r7) 1.248461ms ago: executing program 5 (id=137): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x0, 0xfe, 0x0, 0x21df, 0x2, 0x3, 0x1, 0x9, 0x6, 0x1, 0x5, 0x0, 0x7, 0x6, 0x1, 0x0, 0x9, 0x9, '\x00', 0xc, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 907.392µs ago: executing program 7 (id=138): creat(&(0x7f0000000240)='./file0\x00', 0x21) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808b", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5ffffff, 0x12, r0, 0x80000000000000) 328.879µs ago: executing program 7 (id=139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180080000100000000000000000000009501000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x22, 0x2, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x20}, 0x1c) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[]) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYRES64=r4], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r7}, 0x38) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x4000, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @multicast1}, 0x10) 0s ago: executing program 6 (id=140): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x41, 0x4000, @fd_index=0x8, 0x81, &(0x7f0000000380)="fcdd0c06ae959df25556ac484335443e61ad21f225b5b199a6407cf1d5c0675cb4d489aec8bb557eecf702163be7", 0x2e, 0xe}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7f, 0x3a, ')+\'&\'\\%+', 0x3a, 'smackfsroot', 0x3a, './file0', 0x3a, [0x43]}, 0x3b) preadv(r9, &(0x7f0000001240)=[{&(0x7f0000000200)=""/34, 0x22}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000a80)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x200, @mcast2, 0x64}, {0xa, 0x4e24, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, r11, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @mcast1, 0x4}, {0xa, 0x4e20, 0xa1, @loopback, 0x1}, r11, 0x1}}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:17344' (ED25519) to the list of known hosts. [ 31.926972][ T5864] cgroup: Unknown subsys name 'net' [ 32.131758][ T5864] cgroup: Unknown subsys name 'cpuset' [ 32.134733][ T5864] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.877827][ T5864] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.415141][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.417917][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.420778][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.424928][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.427805][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.437568][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.438136][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.439740][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.439852][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.442312][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.445226][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.446385][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.448331][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.448543][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.448891][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.449067][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.449991][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.451580][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.451782][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.458079][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.459194][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.465748][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.466377][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.474993][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.585916][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 35.607400][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 35.616276][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 35.765136][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.768007][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.770957][ T5944] bridge_slave_0: entered allmulticast mode [ 35.773064][ T5944] bridge_slave_0: entered promiscuous mode [ 35.775701][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.777752][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.780053][ T5942] bridge_slave_0: entered allmulticast mode [ 35.782142][ T5942] bridge_slave_0: entered promiscuous mode [ 35.784852][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.786881][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.788895][ T5942] bridge_slave_1: entered allmulticast mode [ 35.791798][ T5942] bridge_slave_1: entered promiscuous mode [ 35.795417][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 35.813670][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.815784][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.818187][ T5944] bridge_slave_1: entered allmulticast mode [ 35.820771][ T5944] bridge_slave_1: entered promiscuous mode [ 35.868647][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.873999][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.885294][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.887317][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.889744][ T5950] bridge_slave_0: entered allmulticast mode [ 35.891934][ T5950] bridge_slave_0: entered promiscuous mode [ 35.915566][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.932239][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.934288][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.936340][ T5950] bridge_slave_1: entered allmulticast mode [ 35.938477][ T5950] bridge_slave_1: entered promiscuous mode [ 35.973438][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.989377][ T5942] team0: Port device team_slave_0 added [ 35.999257][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.037847][ T5942] team0: Port device team_slave_1 added [ 36.041122][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.043995][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.046570][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.048780][ T5949] bridge_slave_0: entered allmulticast mode [ 36.053010][ T5949] bridge_slave_0: entered promiscuous mode [ 36.057234][ T5944] team0: Port device team_slave_0 added [ 36.087613][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.090222][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.092788][ T5949] bridge_slave_1: entered allmulticast mode [ 36.095645][ T5949] bridge_slave_1: entered promiscuous mode [ 36.099578][ T5944] team0: Port device team_slave_1 added [ 36.114855][ T5950] team0: Port device team_slave_0 added [ 36.140145][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.142178][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.150164][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.155275][ T5950] team0: Port device team_slave_1 added [ 36.178492][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.180570][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.187680][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.191424][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.193363][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.200612][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.214237][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.217725][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.219778][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.226886][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.245442][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.248021][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.257254][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.261745][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.266631][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.268568][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.277186][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.329565][ T5944] hsr_slave_0: entered promiscuous mode [ 36.331695][ T5944] hsr_slave_1: entered promiscuous mode [ 36.335338][ T5942] hsr_slave_0: entered promiscuous mode [ 36.337324][ T5942] hsr_slave_1: entered promiscuous mode [ 36.339184][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.341492][ T5942] Cannot create hsr debugfs directory [ 36.345056][ T5949] team0: Port device team_slave_0 added [ 36.348214][ T5949] team0: Port device team_slave_1 added [ 36.395684][ T5950] hsr_slave_0: entered promiscuous mode [ 36.398186][ T5950] hsr_slave_1: entered promiscuous mode [ 36.400671][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.403331][ T5950] Cannot create hsr debugfs directory [ 36.414868][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.417308][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.424341][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.440347][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.442319][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.449594][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.533003][ T5949] hsr_slave_0: entered promiscuous mode [ 36.535058][ T5949] hsr_slave_1: entered promiscuous mode [ 36.537443][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.539861][ T5949] Cannot create hsr debugfs directory [ 36.625490][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.631192][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.635934][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.640140][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.673500][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.678499][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.685591][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.689045][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.711558][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.717207][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.720471][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.728716][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.745757][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.752644][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.757107][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.765538][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.787701][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.803779][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.810896][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.824062][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.826221][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.832045][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.834161][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.842731][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.858643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.860742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.866053][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.868037][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.873162][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.877004][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.888044][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.899100][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.911644][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.914435][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.918246][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.920311][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.933808][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.935756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.938373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.940386][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.952678][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.955604][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.974014][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.993907][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.013185][ T5944] veth0_vlan: entered promiscuous mode [ 37.017201][ T5944] veth1_vlan: entered promiscuous mode [ 37.028817][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.033996][ T5944] veth0_macvtap: entered promiscuous mode [ 37.037540][ T5944] veth1_macvtap: entered promiscuous mode [ 37.045566][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.053819][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.061184][ T5944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.064016][ T5944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.066838][ T5944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.069825][ T5944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.074533][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.093862][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.097115][ T5949] veth0_vlan: entered promiscuous mode [ 37.113310][ T5949] veth1_vlan: entered promiscuous mode [ 37.124466][ T5950] veth0_vlan: entered promiscuous mode [ 37.136587][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.139157][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.146795][ T5950] veth1_vlan: entered promiscuous mode [ 37.154127][ T5949] veth0_macvtap: entered promiscuous mode [ 37.161855][ T5949] veth1_macvtap: entered promiscuous mode [ 37.164386][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.166872][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.167499][ T5942] veth0_vlan: entered promiscuous mode [ 37.173987][ T5942] veth1_vlan: entered promiscuous mode [ 37.180939][ T5950] veth0_macvtap: entered promiscuous mode [ 37.184554][ T5950] veth1_macvtap: entered promiscuous mode [ 37.192686][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.195718][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.198982][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.203223][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.204061][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.206968][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.215533][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.219992][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.223208][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.228515][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.231682][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.235533][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.238842][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.242498][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.245221][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.248132][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.252163][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.256227][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.260059][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.262471][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.264902][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.273231][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.275694][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.278073][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.281016][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.288913][ T5942] veth0_macvtap: entered promiscuous mode [ 37.292620][ T5942] veth1_macvtap: entered promiscuous mode [ 37.313433][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.316462][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.319203][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.322811][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.325748][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.328625][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.331852][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.339766][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.342523][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.345702][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.348760][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.351603][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.354445][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.357187][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.360509][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.363694][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.367810][ T5942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.370810][ T5942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.373190][ T5942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.375794][ T5942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.383914][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.386187][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.409384][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.411709][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.418981][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.422243][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.422354][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.424892][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.438256][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.442669][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.488632][ T5956] Bluetooth: hci1: command tx timeout [ 37.490832][ T5956] Bluetooth: hci2: command tx timeout [ 37.492943][ T5956] Bluetooth: hci0: command tx timeout [ 37.523049][ T6015] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 37.569469][ T5953] Bluetooth: hci3: command tx timeout [ 37.582336][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.588791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 37.875948][ T6022] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 37.878183][ T6022] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 37.998491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.100781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.103455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.103501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.108227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.149499][ T6007] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.299465][ T6007] usb 5-1: Using ep0 maxpacket: 32 [ 38.303475][ T6007] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 38.306026][ T6007] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 38.308646][ T6007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 38.311379][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.314138][ T6007] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 38.316891][ T6007] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.320909][ T6007] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 38.323658][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.327140][ T6007] usb 5-1: config 0 descriptor?? [ 38.566717][ T6007] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 38.612779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.612851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.615222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 38.619920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 39.168514][ T6062] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 39.173546][ T6062] process 'syz.1.7' launched '/dev/fd/8' with NULL argv: empty string added [ 39.437023][ T35] usb 5-1: USB disconnect, device number 2 [ 39.442849][ T35] usblp0: removed [ 39.561011][ T5953] Bluetooth: hci0: command tx timeout [ 39.563207][ T5953] Bluetooth: hci2: command tx timeout [ 39.565457][ T5956] Bluetooth: hci1: command tx timeout [ 39.587528][ T6072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.639503][ T5956] Bluetooth: hci3: command tx timeout [ 40.119523][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.163161][ T6081] Bluetooth: MGMT ver 1.23 [ 40.166088][ T39] audit: type=1326 audit(1735400330.349:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 40.172009][ T39] audit: type=1326 audit(1735400330.349:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.13" exe="/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 40.178170][ T39] audit: type=1326 audit(1735400330.349:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 40.184774][ T39] audit: type=1326 audit(1735400330.349:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.13" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 40.784847][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 40.789165][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 40.792847][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 40.796562][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.800650][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.803290][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.814250][ T8] usb 5-1: config 0 descriptor?? [ 40.817574][ T6076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.039716][ T6096] syz.3.16 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.249372][ T5322] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 41.401352][ T5322] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 41.403673][ T5322] usb 6-1: config 0 has no interface number 0 [ 41.405412][ T5322] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.409896][ T6104] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 41.419977][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.423487][ T6104] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 41.429528][ T5322] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 41.432994][ T5322] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 41.436790][ T5322] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 41.440486][ T5322] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 41.444191][ T5322] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 41.446801][ T5322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.450977][ T5322] usb 6-1: config 0 descriptor?? [ 41.453762][ T6095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.467946][ T5322] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 41.633784][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 41.635684][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 41.639458][ T5298] Bluetooth: hci1: command tx timeout [ 41.640659][ T5948] Bluetooth: hci0: command tx timeout [ 41.641158][ T5956] Bluetooth: hci2: command tx timeout [ 41.648807][ T8] usb 5-1: USB disconnect, device number 3 [ 41.703585][ T5322] usb 6-1: USB disconnect, device number 2 [ 41.707880][ T5322] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 41.731764][ T5956] Bluetooth: hci3: command 0x040f tx timeout [ 42.394264][ T6118] 9pnet_virtio: no channels available for device syz [ 42.466739][ T6121] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 42.498183][ T6121] bond0: (slave wlan1): Opening slave failed [ 42.793957][ T6144] syz.3.27 uses obsolete (PF_INET,SOCK_PACKET) [ 42.915076][ T1134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.062834][ T1134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.121540][ T1134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.183573][ T1134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.195691][ T6159] warning: `syz.3.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.200557][ T30] IPVS: starting estimator thread 0... [ 43.212826][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.216105][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.218905][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.222709][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.225362][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.228118][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.287895][ T1134] bridge_slave_1: left allmulticast mode [ 43.289718][ T1134] bridge_slave_1: left promiscuous mode [ 43.291911][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.303914][ T1134] bridge_slave_0: left allmulticast mode [ 43.305626][ T1134] bridge_slave_0: left promiscuous mode [ 43.307249][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.336620][ T6160] IPVS: using max 39 ests per chain, 93600 per kthread [ 43.719520][ T5953] Bluetooth: hci2: command tx timeout [ 43.719534][ T5956] Bluetooth: hci1: command tx timeout [ 43.799481][ T5956] Bluetooth: hci3: command 0x040f tx timeout [ 43.879520][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.915216][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.931192][ T1134] bond0 (unregistering): Released all slaves [ 44.067560][ T6161] chnl_net:caif_netlink_parms(): no params data found [ 44.282614][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.284672][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.286942][ T6161] bridge_slave_0: entered allmulticast mode [ 44.296613][ T6161] bridge_slave_0: entered promiscuous mode [ 44.303806][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.310760][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.312841][ T6161] bridge_slave_1: entered allmulticast mode [ 44.315085][ T6161] bridge_slave_1: entered promiscuous mode [ 44.974402][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.982532][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.013194][ T1134] hsr_slave_0: left promiscuous mode [ 45.015596][ T1134] hsr_slave_1: left promiscuous mode [ 45.018039][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.020410][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.023257][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.025207][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.041779][ T1134] veth1_macvtap: left promiscuous mode [ 45.043372][ T1134] veth0_macvtap: left promiscuous mode [ 45.044833][ T1134] veth1_vlan: left promiscuous mode [ 45.046267][ T1134] veth0_vlan: left promiscuous mode [ 45.319057][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.322763][ T5953] Bluetooth: hci0: command tx timeout [ 45.332038][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.337618][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.340455][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.342774][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.347919][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.780068][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 45.864774][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 45.879707][ T5953] Bluetooth: hci3: command 0x040f tx timeout [ 46.366301][ T6161] team0: Port device team_slave_0 added [ 46.373513][ T6161] team0: Port device team_slave_1 added [ 46.417098][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.421235][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.429019][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.433253][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.435298][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.444751][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.500707][ T6161] hsr_slave_0: entered promiscuous mode [ 46.503714][ T6161] hsr_slave_1: entered promiscuous mode [ 46.506075][ T6161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.508312][ T6161] Cannot create hsr debugfs directory [ 46.616779][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 46.679998][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.682363][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.684437][ T6215] bridge_slave_0: entered allmulticast mode [ 46.686657][ T6215] bridge_slave_0: entered promiscuous mode [ 46.696335][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.699123][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.702140][ T6215] bridge_slave_1: entered allmulticast mode [ 46.704589][ T6215] bridge_slave_1: entered promiscuous mode [ 46.737048][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.743882][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.799030][ T6161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.804654][ T6161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.833089][ T6215] team0: Port device team_slave_0 added [ 46.837771][ T6215] team0: Port device team_slave_1 added [ 46.840554][ T6161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.844220][ T6161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.875287][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.878318][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.889957][ T6215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.898074][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.901134][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.908601][ T6215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.978305][ T6215] hsr_slave_0: entered promiscuous mode [ 46.981521][ T6215] hsr_slave_1: entered promiscuous mode [ 46.985006][ T6215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.988686][ T6215] Cannot create hsr debugfs directory [ 46.992243][ T6257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 47.053768][ T1134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.103872][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.120841][ T1134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.198524][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.216137][ T6275] FAULT_INJECTION: forcing a failure. [ 47.216137][ T6275] name failslab, interval 1, probability 0, space 0, times 1 [ 47.221510][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.3.47 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 47.223865][ T1134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.225537][ T6275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.233068][ T6275] Call Trace: [ 47.234405][ T6275] [ 47.235568][ T6275] dump_stack_lvl+0x16c/0x1f0 [ 47.237457][ T6275] should_fail_ex+0x497/0x5b0 [ 47.239314][ T6275] ? fs_reclaim_acquire+0xae/0x150 [ 47.241351][ T6275] should_failslab+0xc2/0x120 [ 47.243247][ T6275] __kmalloc_noprof+0xce/0x4f0 [ 47.245145][ T6275] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 47.247434][ T6275] ? io_alloc_async_data+0x9d/0x150 [ 47.249572][ T6275] io_alloc_async_data+0x9d/0x150 [ 47.251678][ T6275] io_prep_rw+0x30d/0xb70 [ 47.253397][ T6275] io_submit_sqes+0x850/0x25f0 [ 47.255309][ T6275] __do_sys_io_uring_enter+0xd43/0x1620 [ 47.257499][ T6275] ? __fget_files+0x206/0x3a0 [ 47.258080][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.259425][ T6275] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 47.259457][ T6275] ? fput+0x67/0x440 [ 47.259480][ T6275] ? ksys_write+0x1ba/0x250 [ 47.263889][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.264419][ T6275] ? __pfx_ksys_write+0x10/0x10 [ 47.266454][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.267724][ T6275] __do_fast_syscall_32+0x73/0x120 [ 47.267754][ T6275] do_fast_syscall_32+0x32/0x80 [ 47.272064][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.272229][ T6275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.275419][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 47.276822][ T6275] RIP: 0023:0xf7f38579 [ 47.279463][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.280842][ T6275] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 47.280855][ T6275] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 47.280866][ T6275] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000000047f6 [ 47.280872][ T6275] RDX: 000000000080ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 47.280878][ T6275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.280884][ T6275] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 47.307511][ T6275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.310594][ T6275] [ 47.311966][ C1] vkms_vblank_simulate: vblank timer overrun [ 47.357154][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.360018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.381015][ T1134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.392978][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.395887][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.409484][ T5948] Bluetooth: hci1: command tx timeout [ 47.409545][ T5953] Bluetooth: hci0: command tx timeout [ 47.485907][ T6215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.503679][ T6215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.529153][ T6215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.548072][ T6215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.812824][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 47.913350][ T1134] bridge_slave_1: left allmulticast mode [ 47.915396][ T1134] bridge_slave_1: left promiscuous mode [ 47.917573][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.924184][ T1134] bridge_slave_0: left allmulticast mode [ 47.925966][ T1134] bridge_slave_0: left promiscuous mode [ 47.927690][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.219420][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.225859][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.232017][ T1134] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 48.242639][ T1134] bond0 (unregistering): Released all slaves [ 48.309088][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.327180][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.336867][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.339056][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.343659][ T6278] bridge_slave_0: entered allmulticast mode [ 48.345824][ T6278] bridge_slave_0: entered promiscuous mode [ 48.353137][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.355236][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.357312][ T6278] bridge_slave_1: entered allmulticast mode [ 48.362879][ T6278] bridge_slave_1: entered promiscuous mode [ 48.418256][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.423779][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.433977][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.501692][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.504510][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.508614][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.511050][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.593401][ T6215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.596470][ T6215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.620753][ T6278] team0: Port device team_slave_0 added [ 48.635476][ T6278] team0: Port device team_slave_1 added [ 48.690728][ T1134] hsr_slave_0: left promiscuous mode [ 48.693530][ T1134] hsr_slave_1: left promiscuous mode [ 48.696438][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.698692][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.708533][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.711854][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.748362][ T1134] veth1_macvtap: left promiscuous mode [ 48.750180][ T1134] veth0_macvtap: left promiscuous mode [ 48.751802][ T1134] veth1_vlan: left promiscuous mode [ 48.753356][ T1134] veth0_vlan: left promiscuous mode [ 49.320400][ T5953] Bluetooth: hci2: command tx timeout [ 49.422854][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 49.478917][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 49.479673][ T5953] Bluetooth: hci1: command tx timeout [ 49.480637][ T5948] Bluetooth: hci0: command tx timeout [ 49.876748][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.879198][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.888749][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.894893][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.897517][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.906936][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.961930][ T6278] hsr_slave_0: entered promiscuous mode [ 49.966133][ T6278] hsr_slave_1: entered promiscuous mode [ 50.026239][ T6161] veth0_vlan: entered promiscuous mode [ 50.052377][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.064499][ T6161] veth1_vlan: entered promiscuous mode [ 50.087826][ T6278] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 50.091981][ T6278] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 50.104183][ T6161] veth0_macvtap: entered promiscuous mode [ 50.106275][ T6278] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 50.117188][ T6278] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 50.123139][ T6161] veth1_macvtap: entered promiscuous mode [ 50.137104][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.141018][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.143868][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.146881][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.152091][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.158354][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.162294][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.165839][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.169853][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.174029][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.178540][ T6161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.181098][ T6161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.184232][ T6161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.187457][ T6161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.247000][ T6215] veth0_vlan: entered promiscuous mode [ 50.267744][ T6215] veth1_vlan: entered promiscuous mode [ 50.285718][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.291312][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.296430][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.305449][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.307741][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.321331][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.332555][ T6215] veth0_macvtap: entered promiscuous mode [ 50.336484][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.338612][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.349937][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.352193][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.357590][ T6215] veth1_macvtap: entered promiscuous mode [ 50.383776][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.387055][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.391397][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.396226][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.400830][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 50.403899][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.411978][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.415072][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.417759][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.426678][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.432404][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.436488][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.441038][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.445670][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.449855][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.453376][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.457223][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.460414][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.463355][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.466612][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.483023][ T6215] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.485975][ T6215] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.488512][ T6215] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.495839][ T6215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.516522][ T1134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.601568][ T1134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.647563][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.651174][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.678044][ T1134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.694245][ T6338] chnl_net:caif_netlink_parms(): no params data found [ 50.700745][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.732232][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.736472][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.780521][ T1134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.802990][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.805071][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.807195][ T6338] bridge_slave_0: entered allmulticast mode [ 50.819805][ T6338] bridge_slave_0: entered promiscuous mode [ 50.826282][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.828393][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.834778][ T6338] bridge_slave_1: entered allmulticast mode [ 50.837348][ T6338] bridge_slave_1: entered promiscuous mode [ 50.959183][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.039755][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.096955][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.135092][ T6338] team0: Port device team_slave_0 added [ 51.144391][ T6338] team0: Port device team_slave_1 added [ 51.196508][ T57] IPVS: starting estimator thread 0... [ 51.207355][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.289479][ T6379] IPVS: using max 39 ests per chain, 93600 per kthread [ 51.399675][ T5953] Bluetooth: hci2: command tx timeout [ 51.417401][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.449529][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.452383][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.461777][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.559906][ T5953] Bluetooth: hci0: command tx timeout [ 51.560073][ T5948] Bluetooth: hci1: command tx timeout [ 51.662208][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.664866][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.673236][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.698888][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.720693][ T6338] hsr_slave_0: entered promiscuous mode [ 51.722783][ T6338] hsr_slave_1: entered promiscuous mode [ 51.724682][ T6338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.726840][ T6338] Cannot create hsr debugfs directory [ 51.735291][ T6278] veth0_vlan: entered promiscuous mode [ 51.739012][ T6278] veth1_vlan: entered promiscuous mode [ 51.873088][ T6278] veth0_macvtap: entered promiscuous mode [ 51.894852][ T1134] bridge_slave_1: left allmulticast mode [ 51.896523][ T1134] bridge_slave_1: left promiscuous mode [ 51.898205][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.903118][ T1134] bridge_slave_0: left allmulticast mode [ 51.904864][ T1134] bridge_slave_0: left promiscuous mode [ 51.906548][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.910883][ T1134] bridge_slave_1: left allmulticast mode [ 51.912539][ T1134] bridge_slave_1: left promiscuous mode [ 51.914256][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.917748][ T1134] bridge_slave_0: left allmulticast mode [ 51.920582][ T1134] bridge_slave_0: left promiscuous mode [ 51.922232][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.156693][ T6384] syz.5.55 (6384): drop_caches: 1 [ 52.179036][ T6384] syz.5.55 (6384): drop_caches: 1 [ 52.288550][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.292488][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.296464][ T1134] bond0 (unregistering): Released all slaves [ 52.348837][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.352732][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.355926][ T1134] bond0 (unregistering): Released all slaves [ 52.362866][ T6278] veth1_macvtap: entered promiscuous mode [ 52.389162][ T6338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.399931][ T6338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.406551][ T6338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 52.412047][ T6338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 52.415656][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.418852][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.421875][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.424829][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.429357][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.432358][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.435150][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.438073][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.449534][ T5953] Bluetooth: hci3: command tx timeout [ 52.449922][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.457643][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.461092][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.464017][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.467144][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.470101][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.473676][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.476877][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.480085][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.484725][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.493104][ T6278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.495863][ T6278] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.498338][ T6278] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.501204][ T6278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.569738][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.572190][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.590916][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.593583][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.596491][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.607379][ T6338] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.620620][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.622625][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.628514][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.630638][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.795504][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.034849][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.6.59'. [ 53.041249][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.59'. [ 53.049986][ T6338] veth0_vlan: entered promiscuous mode [ 53.053748][ T6338] veth1_vlan: entered promiscuous mode [ 53.068530][ T6338] veth0_macvtap: entered promiscuous mode [ 53.076973][ T6338] veth1_macvtap: entered promiscuous mode [ 53.082597][ T1134] hsr_slave_0: left promiscuous mode [ 53.084528][ T1134] hsr_slave_1: left promiscuous mode [ 53.086502][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.088627][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.093863][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.096043][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.100096][ T1134] hsr_slave_0: left promiscuous mode [ 53.102734][ T1134] hsr_slave_1: left promiscuous mode [ 53.104785][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.106920][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.109411][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.111562][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.137712][ T1134] veth1_macvtap: left promiscuous mode [ 53.139876][ T1134] veth0_macvtap: left promiscuous mode [ 53.141921][ T1134] veth1_vlan: left promiscuous mode [ 53.143877][ T1134] veth0_vlan: left promiscuous mode [ 53.146950][ T1134] veth1_macvtap: left promiscuous mode [ 53.148987][ T1134] veth0_macvtap: left promiscuous mode [ 53.151123][ T1134] veth1_vlan: left promiscuous mode [ 53.153726][ T1134] veth0_vlan: left promiscuous mode [ 53.489420][ T5953] Bluetooth: hci2: command tx timeout [ 53.639744][ T5953] Bluetooth: hci1: command tx timeout [ 54.120085][ T45] wlan1: Trigger new scan to find an IBSS to join [ 54.298465][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 54.338053][ T6442] ======================================================= [ 54.338053][ T6442] WARNING: The mand mount option has been deprecated and [ 54.338053][ T6442] and is ignored by this kernel. Remove the mand [ 54.338053][ T6442] option from the mount to silence this warning. [ 54.338053][ T6442] ======================================================= [ 54.377499][ T6442] MINIX-fs: blocksize too small for device [ 54.385850][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 54.529548][ T5953] Bluetooth: hci3: command tx timeout [ 55.305194][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 55.363195][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 55.439512][ T6011] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 55.569492][ T5953] Bluetooth: hci2: command tx timeout [ 55.609404][ T6011] usb 10-1: Using ep0 maxpacket: 32 [ 55.619655][ T6011] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 55.623081][ T6011] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.626351][ T6011] usb 10-1: Product: syz [ 55.627889][ T6011] usb 10-1: Manufacturer: syz [ 55.629691][ T6011] usb 10-1: SerialNumber: syz [ 55.637298][ T6011] usb 10-1: config 0 descriptor?? [ 55.808629][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.812265][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.815449][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.819656][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.822547][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.825476][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.831591][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.838117][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.843730][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.845720][ T6011] airspy 10-1:0.0: usb_control_msg() failed -71 request 09 [ 55.846857][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.850258][ T6011] airspy 10-1:0.0: Could not detect board [ 55.852720][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.854523][ T6011] airspy 10-1:0.0: probe with driver airspy failed with error -71 [ 55.857546][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.857555][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.860725][ T6011] usb 10-1: USB disconnect, device number 2 [ 55.866332][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.892591][ T6338] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.899604][ T6338] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.902599][ T6338] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.905035][ T6338] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.947210][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.950458][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.959151][ T6439] infiniband syz0: set active [ 55.959280][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.962610][ T6439] infiniband syz0: added bond0 [ 55.963899][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.966817][ T6439] syz0: rxe_create_cq: returned err = -12 [ 55.970231][ T6439] infiniband syz0: Couldn't create ib_mad CQ [ 55.972501][ T6439] infiniband syz0: Couldn't open port 1 [ 56.019957][ T6439] RDS/IB: syz0: added [ 56.021838][ T6439] smc: adding ib device syz0 with port count 1 [ 56.023679][ T6439] smc: ib device syz0 port 1 has pnetid [ 56.392279][ T1134] IPVS: stop unused estimator thread 0... [ 56.452149][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.66'. [ 56.599447][ T5953] Bluetooth: hci3: command tx timeout [ 56.855375][ T6460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.862275][ T6460] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 56.883631][ T6460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.885357][ T6460] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 56.896608][ T6460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.898452][ T6460] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 56.918673][ T6460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.925343][ T6460] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 57.446781][ T6545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.512135][ T6545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.577428][ T6545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.705721][ T6545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.766193][ T6545] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.772054][ T6545] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.777643][ T6545] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.783270][ T6545] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.939517][ T5989] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 59.058483][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.83'. [ 59.096418][ T5989] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.107276][ T5989] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.114973][ T5989] usb 12-1: Product: syz [ 59.119048][ T5989] usb 12-1: Manufacturer: syz [ 59.125509][ T5989] usb 12-1: SerialNumber: syz [ 59.135534][ T5989] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 59.176631][ T6011] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 59.179812][ T6630] netlink: 'syz.5.82': attribute type 2 has an invalid length. [ 59.182417][ T6630] netlink: 'syz.5.82': attribute type 1 has an invalid length. [ 59.402769][ T6013] usb 12-1: USB disconnect, device number 2 [ 59.483091][ T6645] Bluetooth: MGMT ver 1.23 [ 59.869423][ T6334] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 60.022281][ T6702] FAULT_INJECTION: forcing a failure. [ 60.022281][ T6702] name failslab, interval 1, probability 0, space 0, times 0 [ 60.025966][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.7.91 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 60.028963][ T6702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.031994][ T6702] Call Trace: [ 60.032966][ T6702] [ 60.033792][ T6702] dump_stack_lvl+0x16c/0x1f0 [ 60.035074][ T6702] should_fail_ex+0x497/0x5b0 [ 60.036403][ T6702] ? fs_reclaim_acquire+0xae/0x150 [ 60.037991][ T6702] should_failslab+0xc2/0x120 [ 60.039667][ T6702] __kmalloc_noprof+0xce/0x4f0 [ 60.040983][ T6702] ? d_absolute_path+0x137/0x1b0 [ 60.042390][ T6702] ? tomoyo_encode2+0x100/0x3e0 [ 60.043750][ T6702] tomoyo_encode2+0x100/0x3e0 [ 60.045067][ T6702] tomoyo_realpath_from_path+0x1a7/0x710 [ 60.046659][ T6702] tomoyo_path_number_perm+0x248/0x5b0 [ 60.048157][ T6702] ? tomoyo_path_number_perm+0x235/0x5b0 [ 60.049730][ T6702] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 60.051420][ T6702] ? __pfx_lock_release+0x10/0x10 [ 60.052811][ T6702] ? trace_lock_acquire+0x14e/0x1f0 [ 60.054250][ T6702] ? lock_acquire+0x2f/0xb0 [ 60.055487][ T6702] ? __fget_files+0x40/0x3a0 [ 60.056800][ T6702] ? __fget_files+0x206/0x3a0 [ 60.058230][ T6702] security_file_ioctl_compat+0x9b/0x240 [ 60.059789][ T6702] __do_compat_sys_ioctl+0x4e/0x2c0 [ 60.061243][ T6702] __do_fast_syscall_32+0x73/0x120 [ 60.062683][ T6702] do_fast_syscall_32+0x32/0x80 [ 60.063985][ T6702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.065829][ T6702] RIP: 0023:0xf7fc6579 [ 60.066968][ T6702] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.072295][ T6702] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 60.074702][ T6702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af04 [ 60.076879][ T6702] RDX: 0000000020000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.079573][ T6702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.082129][ T6702] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.084366][ T6702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.086612][ T6702] [ 60.088228][ T6702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.090951][ T6334] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.093404][ T6334] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 60.096203][ T6334] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.098719][ T6334] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 60.102368][ T6334] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 60.106656][ T6334] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.109261][ T6334] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.111606][ T6334] usb 11-1: Product: syz [ 60.112803][ T6334] usb 11-1: Manufacturer: syz [ 60.124880][ T6334] cdc_wdm 11-1:1.0: skipping garbage [ 60.126435][ T6334] cdc_wdm 11-1:1.0: skipping garbage [ 60.134532][ T6334] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 60.136248][ T6334] cdc_wdm 11-1:1.0: Unknown control protocol [ 60.209624][ T6011] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 60.220095][ T6011] ath9k_htc: Failed to initialize the device [ 60.225354][ T6013] usb 12-1: ath9k_htc: USB layer deinitialized [ 60.328503][ T6718] dccp_invalid_packet: pskb_may_pull failed [ 60.362461][ T8] usb 11-1: USB disconnect, device number 2 [ 60.408357][ T6718] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.501571][ T6718] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.560005][ T6718] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.624234][ T6718] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.782240][ T6718] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.787575][ T6718] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.792385][ T6718] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.796879][ T6718] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.918439][ T6736] FAT-fs (sr0): bogus number of reserved sectors [ 60.920423][ T6736] FAT-fs (sr0): Can't find a valid FAT filesystem [ 60.924352][ T6736] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.124273][ T6760] mmap: syz.6.100 (6760) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.312898][ T6007] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 61.459662][ T6007] usb 9-1: Using ep0 maxpacket: 8 [ 61.472446][ T6007] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.475192][ T6007] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.477911][ T6007] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.481219][ T6007] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.484822][ T6007] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.487538][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.538424][ T6809] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.594505][ T6809] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.669180][ T6809] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.696856][ T6007] usb 9-1: GET_CAPABILITIES returned 0 [ 61.698498][ T6007] usbtmc 9-1:16.0: can't read capabilities [ 61.752389][ T6809] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.842167][ T6809] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.847203][ T6809] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.851898][ T6809] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.857148][ T6809] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.916287][ T35] usb 9-1: USB disconnect, device number 2 [ 62.230561][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.113'. [ 63.375489][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.126'. [ 63.449912][ T6639] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 63.604736][ T6639] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.608656][ T6639] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.612149][ T6639] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 63.615966][ T6639] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.622746][ T6639] usb 10-1: config 0 descriptor?? [ 63.628338][ T6639] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 63.632065][ T6639] dvb-usb: bulk message failed: -22 (3/0) [ 63.639267][ T6639] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 63.645761][ T6639] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 63.648183][ T6639] usb 10-1: media controller created [ 63.651150][ T6639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 63.657873][ T39] audit: type=1800 audit(1735400353.839:6): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.127" name="bus" dev="overlay" ino=111 res=0 errno=0 [ 63.665782][ T6639] dvb-usb: bulk message failed: -22 (6/0) [ 63.667945][ T6639] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 63.671359][ T6639] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input5 [ 63.679474][ T6639] dvb-usb: schedule remote query interval to 150 msecs. [ 63.681807][ T6639] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 63.829500][ T6861] dvb-usb: bulk message failed: -22 (2/0) [ 63.834959][ T6639] usb 10-1: USB disconnect, device number 3 [ 63.848530][ T6639] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 64.679199][ T6906] overlayfs: missing 'lowerdir' [ 64.740122][ T39] audit: type=1800 audit(1735400354.929:7): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.135" name="bus" dev="overlay" ino=137 res=0 errno=0 [ 64.792654][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.136'. [ 65.081825][ T6905] syz.5.136 (6905) used greatest stack depth: 20320 bytes left [ 65.100710][ C3] ata1: illegal qc_active transition (00000000->00002000) [ 65.407651][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880670cd800: rx timeout, send abort [ 65.411177][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880670cd800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.431563][ T1104] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 65.466362][ T1104] ata1.00: configured for UDMA/100 [ 65.493553][ T6944] netlink: 'syz.6.140': attribute type 2 has an invalid length. [ 65.495950][ T6944] netlink: 'syz.6.140': attribute type 1 has an invalid length. [ 65.592043][ T114] [ 65.593075][ T114] ====================================================== [ 65.595823][ T114] WARNING: possible circular locking dependency detected [ 65.597930][ T114] 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 Not tainted [ 65.601450][ T114] ------------------------------------------------------ [ 65.603757][ T114] kswapd0/114 is trying to acquire lock: [ 65.605414][ T114] ffff888024003190 (&q->q_usage_counter(io)#68){++++}-{0:0}, at: blk_mq_submit_bio+0x7ca/0x24c0 [ 65.609203][ T114] [ 65.609203][ T114] but task is already holding lock: [ 65.611977][ T114] ffffffff8df4ef60 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x16e/0x18f0 [ 65.615473][ T114] [ 65.615473][ T114] which lock already depends on the new lock. [ 65.615473][ T114] [ 65.619418][ T114] [ 65.619418][ T114] the existing dependency chain (in reverse order) is: [ 65.622796][ T114] [ 65.622796][ T114] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 65.625484][ T114] fs_reclaim_acquire+0x102/0x150 [ 65.627588][ T114] __kmalloc_node_noprof+0xb7/0x520 [ 65.629861][ T114] __kvmalloc_node_noprof+0xad/0x1a0 [ 65.632109][ T114] sbitmap_init_node+0x1ca/0x770 [ 65.634316][ T114] scsi_realloc_sdev_budget_map+0x2c7/0x610 [ 65.636880][ T114] scsi_add_lun+0x11b4/0x1fd0 [ 65.638965][ T114] scsi_probe_and_add_lun+0x4fa/0xda0 [ 65.641316][ T114] __scsi_add_device+0x24b/0x290 [ 65.643498][ T114] ata_scsi_scan_host+0x215/0x780 [ 65.645715][ T114] async_run_entry_fn+0x9c/0x530 [ 65.647878][ T114] process_one_work+0x958/0x1b30 [ 65.650067][ T114] worker_thread+0x6c8/0xf00 [ 65.652133][ T114] kthread+0x2c1/0x3a0 [ 65.654006][ T114] ret_from_fork+0x45/0x80 [ 65.655998][ T114] ret_from_fork_asm+0x1a/0x30 [ 65.658119][ T114] [ 65.658119][ T114] -> #0 (&q->q_usage_counter(io)#68){++++}-{0:0}: [ 65.661546][ T114] __lock_acquire+0x249e/0x3c40 [ 65.663665][ T114] lock_acquire.part.0+0x11b/0x380 [ 65.665915][ T114] __bio_queue_enter+0x4c6/0x740 [ 65.668087][ T114] blk_mq_submit_bio+0x7ca/0x24c0 [ 65.670310][ T114] __submit_bio+0x384/0x540 [ 65.672482][ T114] submit_bio_noacct_nocheck+0x698/0xd70 [ 65.675145][ T114] submit_bio_noacct+0x93a/0x1e20 [ 65.677405][ T114] __swap_writepage+0x3a3/0xf50 [ 65.679712][ T114] swap_writepage+0x403/0x1120 [ 65.681861][ T114] pageout+0x3b2/0xaa0 [ 65.683859][ T114] shrink_folio_list+0x3025/0x42d0 [ 65.686336][ T114] evict_folios+0x6e3/0x19c0 [ 65.688573][ T114] try_to_shrink_lruvec+0x61e/0xa80 [ 65.690923][ T114] shrink_one+0x3e3/0x7b0 [ 65.693008][ T114] shrink_node+0xbf0/0x3f20 [ 65.695035][ T114] balance_pgdat+0xc1f/0x18f0 [ 65.697127][ T114] kswapd+0x605/0xc00 [ 65.698975][ T114] kthread+0x2c1/0x3a0 [ 65.700840][ T114] ret_from_fork+0x45/0x80 [ 65.702839][ T114] ret_from_fork_asm+0x1a/0x30 [ 65.704843][ T114] [ 65.704843][ T114] other info that might help us debug this: [ 65.704843][ T114] [ 65.708985][ T114] Possible unsafe locking scenario: [ 65.708985][ T114] [ 65.711974][ T114] CPU0 CPU1 [ 65.714111][ T114] ---- ---- [ 65.716277][ T114] lock(fs_reclaim); [ 65.717907][ T114] lock(&q->q_usage_counter(io)#68); [ 65.721042][ T114] lock(fs_reclaim); [ 65.723662][ T114] rlock(&q->q_usage_counter(io)#68); [ 65.725865][ T114] [ 65.725865][ T114] *** DEADLOCK *** [ 65.725865][ T114] [ 65.729068][ T114] 1 lock held by kswapd0/114: [ 65.730948][ T114] #0: ffffffff8df4ef60 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x16e/0x18f0 [ 65.734557][ T114] [ 65.734557][ T114] stack backtrace: [ 65.736944][ T114] CPU: 2 UID: 0 PID: 114 Comm: kswapd0 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 65.741032][ T114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.745299][ T114] Call Trace: [ 65.746655][ T114] [ 65.747856][ T114] dump_stack_lvl+0x116/0x1f0 [ 65.749752][ T114] print_circular_bug+0x41c/0x610 [ 65.751746][ T114] check_noncircular+0x31a/0x400 [ 65.753727][ T114] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 65.756219][ T114] ? __pfx_check_noncircular+0x10/0x10 [ 65.757812][ T114] ? lockdep_lock+0x1b8/0x200 [ 65.759171][ T114] ? __pfx_lockdep_lock+0x10/0x10 [ 65.760624][ T114] __lock_acquire+0x249e/0x3c40 [ 65.762114][ T114] ? __pfx___lock_acquire+0x10/0x10 [ 65.763604][ T114] lock_acquire.part.0+0x11b/0x380 [ 65.765067][ T114] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 65.766597][ T114] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 65.768207][ T114] ? rcu_is_watching+0x12/0xc0 [ 65.769581][ T114] ? trace_lock_acquire+0x14e/0x1f0 [ 65.771732][ T114] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 65.773760][ T114] ? lock_acquire+0x2f/0xb0 [ 65.775055][ T114] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 65.776549][ T114] __bio_queue_enter+0x4c6/0x740 [ 65.777987][ T114] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 65.779484][ T114] ? __pfx___bio_queue_enter+0x10/0x10 [ 65.781045][ T114] ? blk_mq_submit_bio+0x7b5/0x24c0 [ 65.782589][ T114] ? __pfx_autoremove_wake_function+0x10/0x10 [ 65.784328][ T114] blk_mq_submit_bio+0x7ca/0x24c0 [ 65.786063][ T114] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 65.788230][ T114] ? __pfx_mark_lock+0x10/0x10 [ 65.790075][ T114] __submit_bio+0x384/0x540 [ 65.791626][ T114] ? __pfx___submit_bio+0x10/0x10 [ 65.793627][ T114] ? ktime_get+0x206/0x300 [ 65.795444][ T114] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.797456][ T114] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 65.799829][ T114] submit_bio_noacct_nocheck+0x698/0xd70 [ 65.802102][ T114] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 65.804591][ T114] ? __pfx___might_resched+0x10/0x10 [ 65.806725][ T114] ? __pfx___folio_start_writeback+0x10/0x10 [ 65.809141][ T114] submit_bio_noacct+0x93a/0x1e20 [ 65.811201][ T114] __swap_writepage+0x3a3/0xf50 [ 65.813163][ T114] swap_writepage+0x403/0x1120 [ 65.815110][ T114] ? folio_clear_dirty_for_io+0x112/0x800 [ 65.817171][ T114] pageout+0x3b2/0xaa0 [ 65.818357][ T114] ? __pfx_pageout+0x10/0x10 [ 65.819689][ T114] ? __pfx_try_to_unmap_one+0x10/0x10 [ 65.821618][ T114] ? __pfx_folio_not_mapped+0x10/0x10 [ 65.823658][ T114] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 65.825961][ T114] ? folio_mark_dirty+0xd8/0x150 [ 65.827857][ T114] shrink_folio_list+0x3025/0x42d0 [ 65.829833][ T114] ? __pfx_shrink_folio_list+0x10/0x10 [ 65.831911][ T114] ? isolate_folios+0x1c57/0x3830 [ 65.833851][ T114] ? hlock_class+0x4e/0x130 [ 65.835597][ T114] ? mark_lock+0xb5/0xc60 [ 65.837285][ T114] ? mark_held_locks+0x9f/0xe0 [ 65.839226][ T114] evict_folios+0x6e3/0x19c0 [ 65.841064][ T114] ? do_shrink_slab+0xb2e/0x11c0 [ 65.843054][ T114] ? __pfx_evict_folios+0x10/0x10 [ 65.845013][ T114] ? find_held_lock+0x2d/0x110 [ 65.846852][ T114] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 65.849134][ T114] ? sc_swappiness+0xd4/0x190 [ 65.851006][ T114] try_to_shrink_lruvec+0x61e/0xa80 [ 65.853133][ T114] ? find_held_lock+0x2d/0x110 [ 65.854517][ T114] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 65.856300][ T114] ? shrink_node+0xbd0/0x3f20 [ 65.857672][ T114] shrink_one+0x3e3/0x7b0 [ 65.858910][ T114] ? shrink_node+0xbd0/0x3f20 [ 65.860258][ T114] shrink_node+0xbf0/0x3f20 [ 65.861901][ T114] ? shrink_node+0x93e/0x3f20 [ 65.863794][ T114] ? __pfx_shrink_node+0x10/0x10 [ 65.865577][ T114] ? __pfx_lock_release+0x10/0x10 [ 65.867015][ T114] ? percpu_ref_put_many.constprop.0+0x1b/0x150 [ 65.868795][ T114] ? balance_pgdat+0xc1f/0x18f0 [ 65.870203][ T114] balance_pgdat+0xc1f/0x18f0 [ 65.871703][ T114] ? __pfx_balance_pgdat+0x10/0x10 [ 65.873225][ T114] ? __switch_to+0x749/0x1190 [ 65.874587][ T114] ? __schedule+0xe60/0x5ad0 [ 65.875914][ T114] ? __pfx___lock_acquire+0x10/0x10 [ 65.877417][ T114] ? __pfx___might_resched+0x10/0x10 [ 65.878956][ T114] ? set_pgdat_percpu_threshold+0xc3/0x330 [ 65.880622][ T114] kswapd+0x605/0xc00 [ 65.882167][ T114] ? __pfx_kswapd+0x10/0x10 [ 65.883787][ T114] ? __pfx_autoremove_wake_function+0x10/0x10 [ 65.885526][ T114] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.887009][ T114] ? __kthread_parkme+0x148/0x220 [ 65.888447][ T114] ? __pfx_kswapd+0x10/0x10 [ 65.889750][ T114] kthread+0x2c1/0x3a0 [ 65.890944][ T114] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.892442][ T114] ? __pfx_kthread+0x10/0x10 [ 65.893785][ T114] ret_from_fork+0x45/0x80 [ 65.895016][ T114] ? __pfx_kthread+0x10/0x10 [ 65.896454][ T114] ret_from_fork_asm+0x1a/0x30 [ 65.897898][ T114] [ 70.760743][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.762807][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 15:39:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b43ed00 RCX=1ffffffff203a2da RDX=0000000000000000 RSI=ffffffff8bb16f80 RDI=ffffffff8169981a RBP=ffffffff8da07c60 RSP=ffffffff8da07b18 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901ce3d7 R11=0000000000000001 R12=ffff88802b43ed00 R13=ffff888021f1c880 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b2014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffaaddb0 CR3=000000004a97c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002a000000000 0000000c00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000021899c RBX=0000000000000001 RCX=ffffffff8b1a3819 RDX=ffffed10056a6fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=ffffed10039df910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001 R12=0000000000000001 R13=ffff88801cefc880 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020025000 CR3=0000000023a4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142e55 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc900021be200 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000074 R14=ffffffff85142df0 R15=0000000000000000 RIP=ffffffff85142e7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f50a5da4 CR3=0000000025458000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000058c54 RBX=0000000000000003 RCX=ffffffff8b1a3819 RDX=ffffed10056e6fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=ffffed1003a52488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d292440 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020a6e000 CR3=000000006da1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000